SageMaker AI adds GPU partitioning for real-time endpoints
SageMaker AI adds MIG-based GPU partitions for real-time inference, with AWS listing support for four instance families in seven regions.
DEV OBSERVATORY
Engineering & AI
News, analysis, and practical guides for the people building the next version.
Aurora PostgreSQL adds post-quantum TLS key exchange
AWS announces post-quantum TLS key exchange for Aurora PostgreSQL, with ssl_groups configuration supported in versions 18 and higher.
AWS brings ACME certificate automation to GovCloud
AWS Certificate Manager now supports ACME clients for public TLS certificate issuance and renewal in both AWS GovCloud (US) regions.
RELEASES / RESEARCH / INDUSTRY
Latest news
AWS connects Step Functions workflows to AI agents through AgentCore Gateway
AI agents can invoke existing Standard and Express workflows through Amazon Bedrock AgentCore Gateway, leaving business-process execution in a defined workflow.
SOURCE / AWS
Amazon MSK Connect adds in-place plugin and worker-configuration updates
AWS says existing connectors can receive custom-plugin and worker-configuration updates while retaining committed offsets, without being deleted and recreated.
SOURCE / AWS
AWS Backup adds cross-account support in European Sovereign Cloud
AWS Backup now supports organization-wide policies, cross-account backup copies and delegated administration in the European Sovereign Cloud’s Germany Region.
SOURCE / AWS
AWS releases AgentCore CLI 1.0 with direct resource workflows
Generally available AgentCore CLI 1.0 adds direct resource operations, consistent global flags and a migration command for existing projects.
SOURCE / AWS
Amazon Quick adds default-on smart approvals for agent actions
AWS says the review layer automatically approves routine agent actions, routes higher-impact steps to users and leaves existing access policies unchanged.
SOURCE / AWS
Amazon EKS Dashboard adds fleet-wide CA rotation visibility
EKS platform teams can now see CA rotation status, approaching expirations and upcoming automated rotation events across accounts and Regions.
SOURCE / AWS
AWS Identity Store adds EventBridge change notifications
IAM Identity Center’s Identity Store now sends change notifications to EventBridge in each enabled Region, supporting identity-driven workflows.
SOURCE / AWS
AWS brings Marketplace and Amazon Business catalogs into one storefront
The unified storefront combines software and physical-goods catalogs under shared governance, but keeps distinct purchasing paths and requires access to both services’ APIs.
SOURCE / AWS
AWS brings SOCI lazy loading to Lambda Managed Instances
AWS adds SOCI lazy loading for OCI-packaged Event Functions on Lambda Managed Instances, fetching needed files instead of the full image at startup.
SOURCE / AWS
ARCHITECTURE / IDENTITY / SYSTEMS
Engineering guides
Should the application or the identity service send verification and recovery emails?
Let the identity service issue and validate verification and recovery credentials, even when your application controls the interface or email delivery.
Vec vs. boxed slices for write-once Rust cache payloads
Build cache payloads with Vec, then consider boxed slices for fixed-length storage. Separate metadata savings, unused capacity, and conversion costs.
Why does rustup require --force-non-host for a 32-bit toolchain on 64-bit Windows?
Rustup 1.29.1 requires an explicit opt-in to install 32-bit Windows host toolchains on 64-bit Windows. Building 32-bit applications remains supported.
User-managed or service-account setup for a long-lived Bedrock Managed Knowledge Base?
Use AWS’s production guidance as a starting point, then assess credential renewal, connection ownership, synchronization recovery, and retrieval permissions.
Can successful reads hide failed pull-request writes in availability metrics?
Request-weighted availability can stay high while a write operation fails. GitHub’s monitoring update illustrates the case for operation-level indicators.
How do I rerun one nested node:test case by name?
Use --test-name-pattern with an explicit file path, allow the enclosing test to run, and exclude sibling cases with precise patterns.
TECHNICAL COVERAGE
Go deeper
01↗
Identity
Authentication, sessions, and the people behind your application.
73 guides02↗
Authorization
Permissions, policies, and deciding who can do what.
35 guides03↗
Architecture
Practical decisions for systems that need to last.
213 guides04↗
Comparisons
Understand the tradeoffs. Choose for your requirements.
76 guides